Mail Index

• Thread Index

• [USN-206-2] Fixed lynx packages for USN-206-1
  • From: Martin Pitt
• [USN-213-1] sudo vulnerability
  • From: Martin Pitt
• [USN-151-3] zlib vulnerabilities
  • From: Martin Pitt
• [USN-212-1] libgda2 vulnerability
  • From: Martin Pitt
• New List
  • From: David Ahmad
• Advisory 20/2005: PHP File-Upload $GLOBALS Overwrite Vulnerability
  • From: Stefan Esser
• Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str()
  • From: Stefan Esser
• Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo()
  • From: Stefan Esser
• OpenVPN[v2.0.x]: foreign_option() formart string vulnerability.
  • From: v9
• Advisory 17/2005: phpBB Multiple Vulnerabilities
  • From: Stefan Esser
• [ GLSA 200510-26 ] XLI, Xloadimage: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200510-25 ] Ethereal: Multiple vulnerabilities in protocol dissectors
  • From: Sune Kloppenborg Jeppesen
• SQL In Invision Gallery 2.0.3
  • From: almaster
• mwcollect v3.0.0 Release
  • From: Georg Wicherski
• SQL IN FORUM.PHP
  • From: ABDUCTER_MINDS
• Re: uplod phpshell in PHP Advanced Transfer Manager
  • From: D_BuG
• APPLE-SA-2005-10-31 Mac OS X v10.4.3
  • From: noreply
• [tool] multispoof - parallel spoofing for throughput increase
  • From: Pawel Pokrywka
• VUBB XSS & path disclosure Vulnerabilities
  • From: alireza hassani
• HYSA-2005-009 Elite Forum 1.0.0.0 XSS Vulnerability
  • From: h4cky0u . org
• Cisco Security Advisory: Cisco IPS MC Malformed Configuration Download Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access
  • From: Cisco Systems Product Security Incident Response Team
• Simple PHP Blog: Multiple XSS Vulnerabilities
  • From: enji
• [SECURITY] [DSA 880-1] New phpmyadmin packages fix several vulnerabilities
  • From: Martin Schulze
• [security bulletin] SSRT051029 rev.0 - HP OpenVMS Local Denial of Service (DoS)
  • From: security-alter
• MDKSA-2005:203 - Updated gda2.0 packages fix string format vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:202 - Updated squirrelmail packages fix vulnerability
  • From: Mandriva Security Team
• [SECURITY] [DSA 879-1] New gallery packages fix privilege escalation
  • From: Martin Schulze
• MDKSA-2005:204 - Updated wget packages fix vulnerability
  • From: Mandriva Security Team
• [OpenPKG-SA-2005.023] OpenPKG Security Advisory (openvpn)
  • From: OpenPKG
• Cisco Security Advisory: IOS Heap-based Overflow Vulnerability in System Timers
  • From: Cisco Systems Product Security Incident Response Team
• Stack Overflow Basics
  • From: [a-t]
• Socket termination in Battle Carry .005
  • From: Luigi Auriemma
• Black Hat Federal and Europe CFP and Registration now open
  • From: Jeff Moss
• Buffer-overflow and crash in FlatFrag 0.3
  • From: Luigi Auriemma
• [ TZO-012005 ] F-Prot/Frisk Anti Virus bypass - ZIP Version Header
  • From: Thierry Zoller
• CuteNews 1.4.1 remote code execution
  • From: retrogod
• Buffer-overflow in Glider collect'n kill 1.0.0.0
  • From: Luigi Auriemma
• Buffer-overflow and directory traversal in Asus Video Security 3.5.0.0
  • From: Luigi Auriemma
• Limited directory traversal in NeroNET 1.2.0.2
  • From: Luigi Auriemma
• Multiple vulnerabilities in Scorched 3D 39.1
  • From: Luigi Auriemma
• Norton Unerase - Need Contact
  • From: alex cottle
• Re: [Full-disclosure] On Interpretation Conflict Vulnerabilities
  • From: Florian Weimer
• Mambo Open Source, Path disclosure
  • From: alireza hassani
• Buffer-overflow in GO-Global for Windows 3.1.0.3270
  • From: Luigi Auriemma
• Re: [Full-disclosure] Advisory 18/2005: PHP Cross Site Scripting(XSS)XVulnerability in phpinfo()
  • From: phole
• On Interpretation Conflict Vulnerabilities
  • From: Steven M. Christey
• Remotely DoSing JBoss 4.0.2 with serialized java objects
  • From: Marc Schoenefeld
• Advisory: Apple QuickTime Player Remote Integer Overflow (2)
  • From: Piotr Bania
• Advisory: Apple QuickTime Player Remote Integer Overflow (1)
  • From: Piotr Bania
• Advisory: Apple QuickTime PICT Remote Memory Overwrite
  • From: Piotr Bania
• Advisory: Apple QuickTime Player Remote Denial Of Service
  • From: Piotr Bania
• [SECURITY] [DSA 881-1] New OpenSSL 0.9.6 packages fix cryptographic weakness
  • From: Martin Schulze
• [SECURITY] [DSA 883-1] New thttpd packages fix insecure temporary file
  • From: Martin Schulze
• Secunia Research: cPanel Entropy Chat Script Insertion Vulnerability
  • From: Secunia Research
• [SECURITY] [DSA 882-1] New OpenSSL packages fix cryptographic weakness
  • From: Martin Schulze
• ZDI-05-002: Clam Antivirus Remote Code Execution
  • From: zdi-disclosures
• Parosproxy 3.2.6: Local Exploitation, Command injection vulnerability
  • From: Marc Schoenefeld
• SUSE Security Announcement: pwdutils, shadow (SUSE-SA:2005:064)
  • From: Ludwig Nussel
• readdir_r considered harmful
  • From: Ben Hutchings
• Re: readdir_r considered harmful
  • From: Ben Hutchings
• [ GLSA 200511-01 ] libgda: Format string vulnerabilities
  • From: Thierry Carrez
• [ GLSA 200511-02 ] QDBM, ImageMagick, GDAL: RUNPATH issues
  • From: Thierry Carrez
• [ GLSA 200511-03 ] giflib: Multiple vulnerabilities
  • From: Thierry Carrez
• DMA[2005-1104a] - 'GpsDrive friendsd2 format string vulnerability'
  • From: kfinisterre
• [EEYEB-20050627B] Macromedia Flash Player Improper Memory Access Vulnerability
  • From: Advisories
• iDEFENSE Security Advisory 11.04.05: Clam AntiVirus Cabinet-file handling Denial of Service Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 11.04.05: Clam AntiVirus tnef_attachment() DoS Vulnerability
  • From: iDEFENSE Labs
• Sql injection in ibProArcade
  • From: bhfh01
• Re: readdir_r considered harmful
  • From: Casper . Dik
• Re: Mambo Open Source, Path disclosure
  • From: Vasiliy
• Zoomblog <IMG> BBCode Tag JavaScript Injection Vulnerability
  • From: sikikmail
• XSS & SQL injection in phpWebThing
  • From: xx_hack_xx_2004
• I-Saudi.Com First K-S-A WarGamE
  • From: S3ude
• Apache Tomcat 5.5.x remote Denial Of Service
  • From: David Maciejak
• Invision Power Board Privilege Esaclation (2.0.1 + more)
  • From: Anti Matter
• Xss - Html injection in XMB
  • From: s2b
• Failles dans Invision Power Board 2.1 [xss]
  • From: benjilenoob
• [waraxe-2005-SA#043] - Sql injection in Phorum 5.0.20 and earlier
  • From: come2waraxe
• Re: OpenVPN[v2.0.x]: foreign_option() formart string vulnerability.
  • From: v9
• Zoomblog HTML Injection Vulnerability
  • From: sikikmail
• Zoomblog HTML Injection Vulnerability
  • From: sikikmail
• Gallery_v2.4 SQL Injection
  • From: abducter_minds
• EUSecWest/London Call for Papers and PacSec/Tokyo announcements
  • From: Dragos Ruiu
• [ GLSA 200511-04 ] ClamAV: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200511-05 ] GNUMP3d: Directory traversal and XSS vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Re: Zoomblog HTML Injection Vulnerability
  • From: RBA
• [SECURITY] [DSA 888-1] New OpenSSL packages fix cryptographic weakness
  • From: Martin Schulze
• [SECURITY] [DSA 886-1] New chmlib packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 885-1] New OpenVPN packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 809-3] New squid packages fix regression
  • From: Martin Schulze
• Work in Progress: FileZilla Server Terminal V0.9.4d Buffer Overflow
  • From: inge . henriksen
• OSTE v1.0 Remote Command Exucetion
  • From: khc
• Path disclosure in CuteNews <= 1.4.0
  • From: poizon
• SEC Consult SA-20051107-1 :: Macromedia Flash Player ActionDefineFunction Memory Corruption
  • From: Bernhard Mueller
• SEC Consult SA-20051107-0 :: toendaCMS multiple vulnerabilites
  • From: Bernhard Mueller
• [SECURITY] [DSA 884-1] New Horde3 packages fix insecure default installation
  • From: Martin Schulze
• Re: [Full-disclosure] Re: readdir_r considered harmful
  • From: Andrew Farmer
• XSS vulnerability in names.co.uk framed hosting
  • From: reuben . 31
• [ GLSA 200511-07 ] OpenVPN: Multiple vulnerabilities
  • From: Thierry Carrez
• [ GLSA 200511-06 ] fetchmail: Password exposure in fetchmailconf
  • From: Thierry Carrez
• upload phpshell in PHPFM
  • From: [at]
• Invision Power Board 2.1 : Multiple XSS Vulnerabilities
  • From: Jerome Athias
• TWiki 20030201 VIEW string remote command execution
  • From: [at]
• Asterisk vmail.cgi vulnerability
  • From: advisories+asterisk
• Advanced Guestbook 2.2 ( SQL Injection Exploit )
  • From: bhs_team
• Re: Re: Mambo Open Source, Path disclosure
  • From: trueend5
• Re: [Full-disclosure] Re: readdir_r considered harmful
  • From: Ulrich Drepper
• [USN-214-1] libungif vulnerabilities
  • From: Martin Pitt
• Re: [Full-disclosure] Re: readdir_r considered harmful
  • From: Casper . Dik
• Re: [Full-disclosure] Re: readdir_r considered harmful
  • From: Ulrich Drepper
• Zone Labs Products Advance Program Control and OS Firewall (Behavioral Based) Technology Bypass Vulnerability
  • From: Debasis Mohanty
• Re: [Full-disclosure] Re: readdir_r considered harmful
  • From: Casper . Dik
• e107 Games System exploit
  • From: willey_wonka
• LayerOne 2006 CFP Released
  • From: Layer One
• [TKADV2005-11-001] Multiple vulnerabilities in PHPlist
  • From: tk
• Hidden accounts on sony vaio laptops
  • From: yash . kadakia
• Oracle October 2005 CPU Problems
  • From: NGSSoftware Insight Security Research
• Oracle DBMS_ASSERT and the October 2005 CPU
  • From: NGSSoftware Insight Security Research
• Re: [Full-disclosure] Re: readdir_r considered harmful
  • From: Andrew Miller
• Re: [Full-disclosure] Re: readdir_r considered harmful
  • From: Casper . Dik
• Call For Papers
  • From: first-2006papers
• MDKSA-2005:205 - Updated clamav packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• [SECURITY] [DSA 889-1] New enigmail packages fix information disclosure
  • From: Martin Schulze
• Re: Hidden accounts on sony vaio laptops
  • From: Williams, James K
• Advisory 21/2005: Multiple vulnerabilities in PHPKIT
  • From: Christopher Kunz
• MDKSA-2005:206 - Updated openvpn packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• [SECURITY] [DSA 891-1] New gpsdrive packages fix arbitrary code execution
  • From: Martin Schulze
• [EEYEB-20050329] Windows Metafile Multiple Heap Overflows
  • From: Advisories
• [EEYEB-20050901] Windows Metafile SetPalette Entries Heap OVerflow Vulnerability (Graphics Rendering Engine Vulnerability)
  • From: Advisories
• CYBSEC - Security Advisory: HTTP Response Splitting in SAP WAS
  • From: Leandro Meiners
• CYBSEC - Security Advisory: Phishing Vector in SAP WAS
  • From: Leandro Meiners
• [SECURITY] [DSA 890-1] New libungif4 packages fix several vulnerabilities
  • From: Martin Schulze
• CYBSEC - Security Advisory: Multiple XSS in SAP WAS
  • From: Leandro Meiners
• Multiple security issues in TikiWiki 1.9.x
  • From: Moritz Naumann
• Antville 1.1 Cross Site Scripting
  • From: Moritz Naumann
• New Bug KESM in GoogleTalk
  • From: natalylopez380
• ASPKnowledgebase vulnerable to SQL-inject
  • From: preben
• ASPKnowledgebase vulnerable to XSS injection.
  • From: preben
• [USN-151-4] rpm vulnerability
  • From: Martin Pitt
• [security bulletin] SSRT051041 Revised - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS)
  • From: security-alert
• [security bulletin] SSRT051064 Revised - HP-UX ftpd Remote Unauthorized Data Access
  • From: security-alert
• [security bulletin] SSRT051014 - HP-UX Trusted Mode remshd Remote Unauthorized Access
  • From: security-alert
• [security bulletin] SSRT051012 - HP-UX envd Local Execution of Privileged Code
  • From: security-alert
• MDKSA-2005:207 - Updated libungif packages fix various vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:208 - Updated emacs packages fix Lisp vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:209 - Updated fetchmail packages fixes fetchmailconf vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:210 - Updated w3c-libwww packages fixes DoS vulnerability.
  • From: Mandriva Security Team
• Re: New Bug KESM in GoogleTalk
  • From: crowdat
• [FS-05-01] Multiple vulnerabilities in phpAdsNew
  • From: Toni Koivunen
• [SECURITY] [DSA 892-1] New awstats packages fix arbitrary command execution
  • From: Martin Schulze
• Folder Guard exe files protection bypass
  • From: ShadowBeast
• [SECURITY] [DSA 804-2] New kdelibs packages fix backup file information leak
  • From: Martin Schulze
• [FLSA-2005:166941] Updated httpd and mod_ssl packages fix two security issues
  • From: Marc Deslauriers
• [USN-215-1] fetchmailconf vulnerability
  • From: Martin Pitt
• Moodle <=1.6dev blind SQL Injection
  • From: retrogod
• [EEYEB-20050510] - RealPlayer Data Packet Stack Overflow
  • From: Advisories
• [EEYEB-20050701] - RealPlayer Zipped Skin File Buffer Overflow II
  • From: Advisories
• High Risk Flaw in RealPlayer
  • From: NGSSoftware Insight Security Research
• SQL injection in phpWebThing 1.4.4
  • From: A . 1 . M
• MDKSA-2005:211 - Updated lynx packages fix critical vulnerability
  • From: Mandriva Security Team
• Multiple Bugs in MyBB 1.0 PR2 Rev 686(Updated Nov 1, 2005)
  • From: syini666
• ZRCSA-200502 - phpAdsNew SQL Injection Vulnerabilities
  • From: Siegfried
• [ GLSA 200511-08 ] PHP: Multiple vulnerabilities
  • From: Thierry Carrez
• PollVote Remote File Inclusion
  • From: stormhacker
• [ GLSA 200511-09 ] Lynx: Arbitrary command execution
  • From: Thierry Carrez
• PHPCalendar (and some more codegrrl.com products) arbitrary code execution
  • From: r . verton
• [ GLSA 200511-10 ] RAR: Format string and buffer overflow vulnerabilities
  • From: Thierry Carrez
• [ GLSA 200511-11 ] linux-ftpd-ssl: Remote buffer overflow
  • From: Thierry Carrez
• [FLSA-2005:152848] Updated glibc packages fix security issues
  • From: Marc Deslauriers
• XOOPS 2.2.3 Final arbitrary local inclusion / XOOPS WF-Downloads module v 2.05 SQL Injection
  • From: retrogod
• DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow'
  • From: Kevin Finisterre
• [SECURITY] [DSA 893-1] New acidlab packages fix SQL injection
  • From: Martin Schulze
• [SECURITY] [DSA 895-1] New uim packages fix privilege escalation
  • From: Martin Schulze
• fipsCMS light - vulnerable to script injection.
  • From: preben
• Advisory 22/2005: Multiple vulnerabilities in phpSysInfo
  • From: Christopher Kunz
• [ADVISORY] CISCO ASA Failover DoS Vulnerability
  • From: Amin Tora
• iDefense Security Advisory 11.11.05: Multiple Vendor Lynx Command Injection Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• [KAPDA::#12] - ekinboard XSS and HTML Injection
  • From: alireza hassani
• [security bulletin] HPSBUX02075 SSRT051074 - HP-UX Running xterm Local Unauthorized Access
  • From: security-alert
• Beta product testing
  • From: Bill Stout
• MD4 and MD5 collision generators
  • From: sflist
• List of Security-oriented Fairs/Events/Conferences?
  • From: Rainer Duffner
• GAO report on e-voting
  • From: Atom Smasher
• phpBB 2.0.18 SQL Query problem
  • From: max
• Re: New Bug KESM in GoogleTalk
  • From: Cory Altheide
• Cisco Security Advisory: Multiple Vulnerabilities Found by PROTOS IPSec Test Suite
  • From: Cisco Systems Product Security Incident Response Team
• Malware Removal and Prevention Procedure
  • From: Paul Laudanski
• Midicart sql injection
  • From: crazy frog crazy frog
• 1-2-All Broadcast E-mail Software vulnerable to a classic SQL admin
  • From: bhs_team
• Cyphor (Release: 0.19) Sql injection
  • From: s2b
• Walla TeleSite Multiple Vulnerabilities
  • From: sinneR
• Multible Sql injections in Wizz Forum
  • From: s2b
• RE: [ADVISORY] CISCO ASA Failover DoS Vulnerability
  • From: Randy Ivener (rivener)
• [SECURITY] [DSA 894-1] New AbiWord packages fix arbitrary code execution
  • From: Martin Schulze
• Re: List of Security-oriented Fairs/Events/Conferences?
  • From: Saeed Abu Nimeh
• RE: List of Security-oriented Fairs/Events/Conferences?
  • From: Jeremy Epstein
• PHPWCMS - Directory traversal vulnerability,CSS attack
  • From: Stefan Lochbihler
• Re: DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow'
  • From: Dana Hudes
• [xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability
  • From: alert7@xxxxxxxxxx
• [FLSA-2005:152794] Updated rp-pppoe package fixes security issue
  • From: Marc Deslauriers
• [ GLSA 200511-12 ] Scorched 3D: Multiple vulnerabilities
  • From: Thierry Carrez
• [SECURITY] [DSA 896-1] New ftpd-ssl packages fix arbitrary code execution
  • From: Martin Schulze
• [FLSA-2005:158801] Updated bzip2 packages fix security issues
  • From: Marc Deslauriers
• Re: phpBB 2.0.18 SQL Query problem
  • From: Ron van Daal
• [PHPADSNEW-SA-2005-002] phpAdsNew and phpPgAds 2.0.7 fix multiple vulnerabilities
  • From: Matteo Beccati
• [SECURITY] [DSA 897-1] New phpsysinfo packages fix several vulnerabilities
  • From: Martin Schulze
• [FS-05-02] Multiple vulnerabilities in phpMyAdmin
  • From: Toni Koivunen
• Three years and ten months without a patch
  • From: David Litchfield
• [FLSA-2005:123013] Updated xchat package fixes security issue
  • From: Marc Deslauriers
• Re: [FLSA-2005:152794] Updated rp-pppoe package fixes security issue
  • From: David F. Skoll
• Affiliate Network Pro v7.2 SQL Injections, Arbitrary code execution, XSS
  • From: r . verton
• Re: Midicart sql injection
  • From: [at]
• Template Seller Pro 3.25
  • From: r . verton
• Re: [xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability
  • From: Thierry Zoller
• RE: List of Security-oriented Fairs/Events/Conferences?
  • From: dave kleiman
• [securityzone@macromedia.com: Macromedia Security Bulletins]
  • From: noreply
• Authentication vulnerability in Belkin wireless devices
  • From: Andrei Mikhailovsky
• iDEFENSE Security Advisory 11.15.05: Multiple Vendor GTK+ gdk-pixbuf XPM Loader Heap Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: phpBB 2.0.18 SQL Query problem
  • From: max
• iDEFENSE Security Advisory 11.15.05: Multiple Vendor Insecure Call to CreateProcess() Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Critical SQL Injection PHPNuke <= 7.8
  • From: sp3x
• APPLE-SA-2005-11-15 iTunes 6 for Windows
  • From: noreply
• [ GLSA 200511-13 ] Sylpheed, Sylpheed-Claws: Buffer overflow in LDIF importer
  • From: Thierry Carrez
• RE: List of Security-oriented Fairs/Events/Conferences?
  • From: Juha-Matti Laurio
• Schneier's PasswordSafe password validation flaw
  • From: info
• SUSE Security Announcement: gdk-pixbuf, gtk2 (SUSE-SA:2005:065)
  • From: Thomas Biege
• Database servers on XP and the curious flaw
  • From: David Litchfield
• Buffer Overrun in FTGate4 Groupware Mail server
  • From: io
• Cisco Security Advisory: Fixed SNMP Communities and Open UDP Port in Cisco 7920 Wireless IP Phone
  • From: Cisco Systems Product Security Incident Response Team
• In response to ISAKMP 'vulnerabilities'
  • From: sigint
• [security bulletin] SSRT051251 - Apache-based Web Server on HP-UX mod_ssl, proxy_http, Remote Execution of Arbitrary Code, Denial of Service (DoS), and Unauthorized Access
  • From: security-alert
• [USN-216-1] GDK vulnerabilities
  • From: Martin Pitt
• Re: Authentication vulnerability in Belkin wireless devices
  • From: Andrei Mikhailovsky
• Re: List of Security-oriented Fairs/Events/Conferences?
  • From: Luca Sambucci
• [security bulletin] SSRT5979 - HP Jetdirect 635n IPv6/IPsec Print Server (J7961A) Remote Denial of Service (DoS)
  • From: Security Alert
• MDKSA-2005:212 - Updated egroupware packages to address phpldapadmin, phpsysinfo vulnerabilities
  • From: Mandriva Security Team
• Buffer OverFlow For Php 4.3.10 and other ?? Local
  • From: papipsycho
• [ GLSA 200511-14 ] GTK+ 2, GdkPixbuf: Multiple XPM decoding vulnerabilities
  • From: Thierry Carrez
• [security bulletin] SSRT5979 - HP-UX Running IPSec Remote Denial of Service (DoS)
  • From: security-alert
• ShmooCon 2006 - Washington DC
  • From: B Potter
• MDKSA-2005:213 - Updated php packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• [KAPDA::#13] - XMB HTML Injection & Path Disclosure.
  • From: alireza hassani
• [SECURITY] [DSA 898-1] New phpgroupware packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 899-1] New egroupware packages fix several vulnerabilities
  • From: Martin Schulze
• iDEFENSE Security Advisory 11.17.05: Qualcomm WorldMail IMAP Server Directory Traversal Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• [SECURITY] [DSA 900-1] New fetchmail packages fix potential information leak
  • From: Martin Schulze
• Snagging Security Tokens to Elevate Privileges
  • From: David Litchfield
• PHP-Fusion <= 6.00.206 Multiple Vulnerabilities
  • From: r . verton
• Re: New Bug KESM in GoogleTalk
  • From: kahrny
• Secunia Research: MailEnable Buffer Overflow and Directory Traversal Vulnerabilities
  • From: Secunia Research
• Google Base
  • From: Petko Petkov
• Secunia Research: Winmail Server Multiple Vulnerabilities
  • From: Secunia Research
• Re: PHP-Fusion <= 6.00.206 Multiple Vulnerabilities
  • From: sheldon
• Mambo 0day Exploit out in the wild - mambo/skype hacked
  • From: rebarz99
• MDKSA-2005:214 - Updated gdk-pixbuf/gtk+2.0 packages fix vulnerability
  • From: Mandriva Security Team
• [SECURITY] [DSA 901-1] New gnump3d packages fix several vulnerabilities
  • From: Martin Schulze
• [security - exponentcms]
  • From: Hans Wolters
• [ GLSA 200511-15 ] Smb4k: Local unauthorized file access
  • From: Sune Kloppenborg Jeppesen
• [TKADV2005-11-004] Multiple Cross Site Scripting vulnerabilities in phpMyFAQ
  • From: tk
• Security Advisory: Struts Error Message Cross Site Scripting
  • From: Irene Abezgauz
• APBoard v [all] ---> [SQL injection]
  • From: ksa_ksa82
• cracking safes with thermal imaging
  • From: Michal Zalewski
• Your One-Stop Site For Sony Lawsuit Info
  • From: Larry Seltzer
• [SECURITY] [DSA 902-1] New xmail packages fix arbitrary code execution
  • From: Martin Schulze
• Re: Work in Progress: FileZilla Server Terminal V0.9.4d Buffer Overflow
  • From: inge . henriksen
• [SECURITY] [DSA 811-2] New common-lisp-controller packages fix arbitrary code injection
  • From: Martin Schulze
• Google Search Appliance proxystylesheet Flaws
  • From: H D Moore
• Re: Cisco Clean Access Agent (Perfigo) bypass
  • From: fakemeail
• Metro Olografix Crypto Meeting 2006 CFP
  • From: Angelo Dell'Aera
• [SECURITY] [DSA 903-1] New unzip packages fix unauthorised permissions modification
  • From: Martin Schulze
• [SECURITY] [DSA 904-1] New netpbm packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 900-2] New fetchmail packages fix potential information leak
  • From: Martin Schulze
• Gadu-Gadu several vulnerabilities (version <= 7.20)
  • From: Jaroslaw Sajko
• Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability
  • From: securityadvisory
• IE BUG, Mozilla DOS?
  • From: admin
• [SECURITY] [DSA 905-1] New mantis packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 906-1] New sylpheed packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200511-16 ] GNUMP3d: Directory traversal and insecure temporary file creation
  • From: Thierry Carrez
• [USN-217-1] Inkscape vulnerability
  • From: Martin Pitt
• [USN-190-2] ucs-snmp vulnerability
  • From: Martin Pitt
• PmWiki 2.0.12 Cross Site Scripting
  • From: Moritz Naumann
• [KAPDA::#14] - PHPPost XSS and HTML Injection
  • From: alireza hassani
• VHCS 2.x HTTP Error Cross Site Scripting
  • From: Moritz Naumann
• Horde MIME Viewer vulnerability
  • From: daniel . schreckling
• Exploiting the Stack (Part I-IV)
  • From: [at]
• [ GLSA 200511-17 ] FUSE: mtab corruption through fusermount
  • From: Thierry Carrez
• [SECURITY] [DSA 900-3] New fetchmail-ssl packages fix potential information leak
  • From: Martin Schulze
• Secunia Research: Opera Command Line URL Shell Command Injection
  • From: Secunia Research
• [USN-218-1] netpbm vulnerabilities
  • From: Martin Pitt
• Cisco PIX TCP Connection Prevention
  • From: Konstantin V. Gavrilenko
• OTRS 1.x/2.x Multiple Security Issues
  • From: Moritz Naumann
• [USN-219-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• [security bulletin] SSRT051074 Revised - HP-UX Running xterm Local Unauthorized Access
  • From: security-alert
• [SECURITY] [DSA 909-1] New horde3 packages fix cross-site scripting
  • From: Martin Schulze
• GeSWall Intrusion Prevention System 2.1 Released (Freeware)
  • From: GentleSecurity Team
• [SECURITY] [DSA 908-1] New sylpheed-claws packages fix arbitrary code execution
  • From: Martin Schulze
• Re: IE BUG, Mozilla DOS?
  • From: Kyle Wheeler
• [SECURITY] [DSA 907-1] New ipmenu packages fix insecure temporary file creation
  • From: Martin Schulze
• Google Talk Denial of Service - BenjiBug
  • From: James Evans
• [ GLSA 200511-20 ] Horde Application Framework: XSS vulnerability
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200511-19 ] eix: Insecure temporary file creation
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200511-18 ] phpSysInfo: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• XSS on Yahoo Mail
  • From: Richard Fuchshuber
• MDKSA-2005:215 - Updated binutils packages fix vulnerabilities
  • From: Mandriva Security Team
• MailEnable IMAP DOS
  • From: Josh Zlatin
• Secunia Research: SpeedProject Products ZIP/UUE File Extraction Buffer Overflow
  • From: Secunia Research
• Advisory 23/2005: vTiger multiple vulnerabilities
  • From: Christopher Kunz
• [SECURITY] [DSA 910-1] New zope2.7 packages fix arbitrary file inclusion
  • From: Martin Schulze
• RE: XSS on Yahoo Mail
  • From: Will Wesley
• freeFTPd 1.0.10 (Dos,Exploit)
  • From: Stefan Lochbihler
• 2nd CFP: Workshops at the 1st Int. Conf. on Availability, Reliability & Security
  • From: Manh Tho
• Re: VHCS 2.x HTTP Error Cross Site Scripting
  • From: Moritz Naumann
• MDKSA-2005:216 - Updated fuse packages fix vulnerability
  • From: Mandriva Security Team
• SEC Consult SA-20051125-0 :: More Vulnerabilities in vTiger CRM
  • From: SEC Consult Research
• eFiction <= 2.0 multiple vulnerabilities
  • From: retrogod
• Mandriva Security
  • From: [at]
• Re: Advisory 23/2005: vTiger multiple vulnerabilities
  • From: Christopher Kunz
• Advisory 23/2005: vTiger multiple vulnerabilities
  • From: Christopher Kunz
• [ GLSA 200511-21 ] Macromedia Flash Player: Remote arbitrary code execution
  • From: Thierry Carrez
• XSS in PBLang 4.65 Profile.php/UCP.php
  • From: r0xes
• Re: XSS on Yahoo Mail
  • From: Steven Champeon
• Re: XSS on Yahoo Mail
  • From: Will Wesley
• Re: XSS on Yahoo Mail
  • From: Jim Ley
• Re: XSS on Yahoo Mail
  • From: Personal Account
• Re: XSS on Yahoo Mail
  • From: little . hacker
• RE: Advisory 23/2005: vTiger multiple vulnerabilities
  • From: Bug Traq Lists
• Re: Mandriva Security
  • From: Vincent Danen
• RE: XSS on Yahoo Mail
  • From: Richard Fuchshuber
• Webistanbul Control Panel Sql Injection
  • From: khc
• Re: XSS on Yahoo Mail
  • From: alireza hassani
• Re: XSS on Yahoo Mail
  • From: Matan Peled
• Remote file include in Athena
  • From: gb . network
• Remote file include in Q-News
  • From: gb . network
• Remote file include in phpgreetz
  • From: gb . network
• [ GLSA 200511-23 ] chmlib, KchmViewer: Stack-based buffer overflow
  • From: Thierry Carrez
• [ GLSA 200511-22 ] Inkscape: Buffer overflow
  • From: Thierry Carrez
• ANN: Free endpoint security software released (Core FORCE 070.105)
  • From: Core FORCE team
• Guppy <= 4.5.9 Remote code execution
  • From: retrogod
• WebCalendar Multiple Vulnerabilities
  • From: ascii
• Php Web Statistik Multiple Vulnerabilities
  • From: ascii
• Free Web Stat Multiple XSS Vulnerabilities
  • From: ascii
• APC Security Advisory - PowerChute Network Shutdown's Web Interface Only Supports HTTP
  • From: Security . advisory
• Re: XSS on Yahoo Mail
  • From: Lance James
• ZRCSA-200503 - ktools Buffer Overflow Vulnerability
  • From: siegfried
• Re: phpBB Code EXEC (v2.0.10)
  • From: deane10
• DNS query spam
  • From: Piotr Kamisiski
• Re: Multiple security issues in TikiWiki 1.9.x
  • From: mose
• Randshop all versiyon Sql &#304;njection
  • From: liz0
• - Cisco IOS HTTP Server code injection/execution vulnerability-
  • From: picardos
• Kadu remote DoS
  • From: michal
• Google Talk cleartext credentials in process memory
  • From: unknown . pentester
• What is wrong with these people?
  • From: Paul Schmehl
• Re: - Cisco IOS HTTP Server code injection/execution vulnerability-
  • From: Florian Weimer
• Flaw in Syn Attack Protection on non-updated Microsoft OSes can lead to DoS
  • From: Luigi Mori
• Re: phpBB Code EXEC (v2.0.10)
  • From: Ron van Daal
• Core FORCE and OpenBSD PF's
  • From: Ivan Arce
• Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 911-1] New gtk+2.0 packages fix several vulnerabilities
  • From: Martin Schulze
• [Full-disclosure] [ GLSA 200511-23 ] chmlib, KchmViewer: Stack-based buffer overflow
  • From: koon
• [FLSA-2005:166943] Updated php packages fix security issues
  • From: Marc Deslauriers
• Re: Re: - Cisco IOS HTTP Server code injection/execution vulnerability-
  • From: limfung
• Xaraya <= 1.0.0 RC4 D.O.S / file corruption
  • From: retrogod
• ASP-Rider Default.asp SQL Injection
  • From: info
• Webmin miniserv.pl format string vulnerability
  • From: advisory
• APPLE-SA-2005-11-29 Security Update 2005-009
  • From: noreply
• Re: DNS query spam
  • From: Alexander Lourier
• Re: DNS query spam
  • From: Josep Ma Castells
• Re: DNS query spam
  • From: Antone Roundy
• Panda Remote Heap Overflow
  • From: list
• N-13 News Remote SQL/PHP Shell injection
  • From: contropotere
• possible privilege escalation on QNX Neutrino 6.3.0
  • From: pasquale minervini
• Re: DNS query spam
  • From: Piotr Kamisiski
• RE: - Cisco IOS HTTP Server code injection/execution vulnerability-
  • From: Evans, Arian
• Re: Re: - Cisco IOS HTTP Server code injection/execution vulnerability-
  • From: picardos
• Re: DNS query spam
  • From: Florian Weimer